Intro + Deep Dive: Kubernetes Policy WG

on YouTube ↗26m

" summary

Kubernetes Policy WG outlines concrete work: a proposed tenant CRD for multi‑tenancy plus a pattern to use OPA and Gatekeeper to compile tenant policy objects down and populate namespaces/resources (prototype discussed, not yet production‑proved). Notes OPA’s Wasm support as enabling. Pursues formal verification using SMT solvers (Z3, CVC4) to build domain‑specific symbolic graphs (network flows, population graphs, security predicates). Proposes a three‑layer loop: policy engine → compiler → enforcement, with case studies and labels for policy‑related KEPs.

AI-written summary · about

" chapters (6)

1. 0:00Start
2. 1:31Overview (SIG Relationship)
3. 2:51WG Running List 2019 - Multi-Tenancy Policy
4. 5:18WG Running List 2019 - OPA Gatekeeper Project
5. 6:38WG New Area Exploration - policy formal verification
6. 18:57CNCF Security SIG - Cloud Native White Paper

" related talks

• 16mDeep Dive: Kubernetes Policy WGZhipeng Huang · KubeCon + CloudNativeCon + Open Source Summit China 2019
• 16mDeep Dive: Kubernetes Policy WGZhipeng Huang · KubeCon + CloudNativeCon China 2019
• 35mDeep Dive: Kubernetes Working Group for Multi-tenancyAdrian Ludwin, Sanjeev Rampal · KubeCon + CloudNativeCon North America 2019
• 46mKubernetes Policy WG Deep DiveZhipeng Huang · KubeCon + CloudNativeCon Europe 2018
• 36mKubernetes Policy, Governance, And Compliance: A WG Policy UpdateJim Bugwadia, Anca Sailer, Jayashree Ramanathan, Robert Ficcaglia · KubeCon + CloudNativeCon North America 2022
• 20mDeep Dive: Kubernetes Policy WGZhipeng Huang, Torin Sandall, Da Ma · KubeCon + CloudNativeCon China 2018
• 38mMulti-Tenancy WG Deep DiveDavid Oppenheimer · KubeCon + CloudNativeCon Europe 2018
• 38mKubernetes Policy WG IntroZhipeng Huang · KubeCon + CloudNativeCon Europe 2018